I'm trying to setup a 1131 AP with three different ssids corresponding to three separate vlans. I feel I'm close to completing this but I can't seem to get all three online at the same time. ssid MickeyMouse seems to always be active and functioning properly. But when I issue the command mbssid guest-mode, that ssid becomes active and the 3rd doesn't show up. I would like to have MickeyMouse and MinnieMouse active for internal use, and Visitor to be for guests/vendors, thus only able to get out to the internet. How can I get all three ssids operational? Then I'll just need to add them to broadcast out on the other radio also. Here is my current (edited) config. Thanks for any assistance
version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname HOME-AP-01 ! enable secret 5 $1$C3Dr$CG4zHGcd/67zBATjOPygh0 ! no aaa new-model ! ! ! dot11 ssid MickeyMouse vlan 200 authentication open authentication key-management wpa version 2 wpa-psk ascii 7 0805434008150133070807 ! dot11 ssid MinnieMouse vlan 220 authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 15360A05172F32003D303E ! dot11 ssid Visitor vlan 222 authentication open authentication key-management wpa version 2 mbssid guest-mode wpa-psk ascii 7 063C06316F410D1C544343595B ! power inline negotiation prestandard source ! ! username Cisco password 7 112A1016141D ! bridge irb ! ! interface Dot11Radio0 no ip address no ip route-cache ! encryption mode ciphers aes-ccm ! encryption vlan 200 mode ciphers aes-ccm ! encryption vlan 220 mode ciphers aes-ccm ! encryption vlan 222 mode ciphers aes-ccm ! ssid MickeyMouse ! ssid MinnieMouse ! ssid Visitor ! station-role root ! interface Dot11Radio0.200 encapsulation dot1Q 200 native no ip route-cache bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio0.220 encapsulation dot1Q 220 no ip route-cache ! interface Dot11Radio0.222 encapsulation dot1Q 222 no ip route-cache ! interface Dot11Radio1 no ip address no ip route-cache shutdown dfs band 3 block channel dfs station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto ! interface FastEthernet0.200 encapsulation dot1Q 200 native no ip route-cache bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface FastEthernet0.220 encapsulation dot1Q 220 no ip route-cache ! interface FastEthernet0.222 encapsulation dot1Q 222 no ip route-cache ! interface BVI1 description LAN interface ip address 192.168.200.12 255.255.255.0 no ip route-cache ! ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag bridge 1 route ip ! ! ! line con 0 line vty 0 4 login local ! end
Enable the broadcast service set identifier (SSID) on the WLAN—With the broadcast SSID enabled, the WLAN/SSID information is sent in the beacons. This also help the clients that perform passive scans (those that do not transmit probe request), as well as clients configured without an SSID to associate with the WLC through this WLAN.
Thanks for the replies. All my work has been through the cli, but I went into the gui to confirm things like in your link, and when I go under Security->SSID Manager, there are no SSIDs listed. Not even the < NEW > is listed.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...